Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d73bf70c-f7bd-3af4-a5d4-63be6369b5e8.roa
File:                     d73bf70c-f7bd-3af4-a5d4-63be6369b5e8.roa (raw, json)
Hash identifier:          ZgasbN1UyhMw/KdCm/QT7fdKQiCqIcGEAuO/VGJarRo=
Subject key identifier:   9A:7B:03:F1:BB:0F:1E:DF:B7:B1:0F:5A:C0:1E:BA:86:E8:04:5E:91
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AB7B63A674D6C2988703D0060
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d73bf70c-f7bd-3af4-a5d4-63be6369b5e8.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     7385
IP address blocks:        50.114.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:3a:67:4d:6c:29:88:70:3d:00:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=3e4dd73e-18c7-4ff4-9642-966074c5fb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:93:d1:30:aa:f0:d0:21:bd:c4:83:b4:39:
                    4f:a4:30:d1:58:04:6e:8f:ff:14:9e:e1:83:59:7a:
                    d9:2f:54:1b:03:81:94:a2:55:3a:52:5e:c3:72:b5:
                    0c:88:93:71:99:64:5d:c4:f8:74:5f:97:ce:ba:33:
                    49:52:9d:ba:f5:79:50:a7:0c:9f:8b:9f:52:c0:fa:
                    bd:84:5b:8c:f5:52:ad:05:9a:58:90:2a:7a:9e:c6:
                    8c:13:2d:81:c1:34:b4:5e:bf:ec:c5:32:90:01:75:
                    c9:97:75:79:cf:23:73:af:01:b0:4e:73:6d:dc:6f:
                    9b:98:e9:ee:e3:9e:5a:3a:33:01:6a:00:3d:c5:e5:
                    e7:14:91:3c:b9:10:a5:b6:0b:7e:3e:39:f0:3a:5f:
                    02:6c:85:ff:c1:2b:8a:e3:19:74:cc:57:ef:b5:07:
                    9f:e4:a1:3d:6b:63:0b:7e:83:ea:c8:f9:9a:9d:e8:
                    67:9b:ae:64:ad:ac:c1:cd:3d:62:ed:fb:d8:ae:aa:
                    07:75:7d:b0:20:d6:ae:bd:e2:fc:98:da:02:40:8c:
                    67:70:d6:52:b9:d6:8e:6b:31:31:e7:25:74:52:54:
                    90:01:84:92:66:91:4b:6f:a7:8f:c2:bb:57:11:64:
                    e0:6d:05:05:30:07:3e:ec:8a:e3:6f:f9:f5:f3:c4:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7B:03:F1:BB:0F:1E:DF:B7:B1:0F:5A:C0:1E:BA:86:E8:04:5E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d73bf70c-f7bd-3af4-a5d4-63be6369b5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:64:a7:b7:08:3b:ad:2e:83:1c:42:c1:3f:5e:43:a7:95:dd:
         e2:8d:1f:44:a9:e1:23:17:31:5d:ca:a1:52:04:84:42:68:b1:
         0d:5a:80:3d:8e:00:85:1e:09:6c:f8:22:18:27:39:00:c2:52:
         1e:cc:f3:7c:28:a9:c4:89:a2:94:31:59:4f:60:09:d5:67:60:
         bb:18:ae:cf:4e:aa:d5:0e:89:10:c7:2e:a1:80:a4:7c:d5:2b:
         35:59:8b:e1:26:aa:4f:cb:cd:11:ae:b4:15:9e:35:51:5f:13:
         fe:99:f5:0d:4b:39:17:ae:f2:fd:13:6b:b5:e2:d3:34:bb:5d:
         c7:18:65:77:96:27:b3:fa:06:68:a1:2b:d1:4a:65:76:ce:67:
         20:10:36:e9:d0:fe:9d:cc:e4:47:3c:5f:81:af:29:c5:5e:be:
         4e:39:c4:5c:09:ca:9c:97:3a:e3:37:4d:9b:f3:d4:6e:d1:93:
         60:87:73:c9:a6:e2:77:36:23:6a:9b:80:dc:6a:ce:2a:0d:1b:
         43:c1:83:9c:5a:43:54:07:7f:83:f9:87:9c:fa:42:37:a0:f3:
         73:e5:c9:a0:25:3a:13:03:09:e2:f8:b4:d6:46:78:76:c8:e2:
         3f:68:4d:61:cd:b4:e1:d4:39:a6:e3:d6:6f:01:2c:50:5c:d3:
         03:67:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:16 2025 by rpki-client